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WHAT IS CLAIMED IS: 



1 1. A method for controlling network traffic to a network 

2 computer which provides network computer services, the method comprising: 

3 measuring capacity of the network computer to service the network 

4 traffic to obtain a signal; 

5 providing a set of rule data which represents different policies for 

6 servicing the network traffic; 

7 selecting a subset of the rule data based on the signal; and 

8 throttling the network traffic to the network computer based on the 

9 selected subset of the rule data wherein services provided by the network computer 
10 are optimized without overloading the network computer, 

1 2. The method as claimed in claim 1 wherein the network 

2 computer is a server and wherein the network traffic includes requests for service 

3 from network clients over the network. 

1 3 . The method as claimed in claim 2 wherein the network is the 

2 Internet and the server is an Internet server. 

1 4. The method as claimed in claim 1 wherein the network traffic 

2 includes denial of service attacks, 

1 5. The method as claimed in claim 1 further comprising 

2 organizing the set of rule data in at least one multi-dimensional coordinate system. 

1 6. The method as claimed in claim 5 wherein the capacity of the 

2 network computer includes load components or load component indices and wherein 

3 the dimensions of the at least one multi-dimensional coordinate system corresponds 

4 to the load components or load component indices. 

1 7. The method as claimed in claim 1 further comprising the step 

2 of classifying network traffic to the network computer to obtain a plurality of traffic 
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3 classifications and wherein the step of throttling is based on the plurality of traffic 

4 classifications. 

1 8. The method as claimed in claim 1 wherein the selected subset 

2 of rule data represents quality of service differentiations and wherein the network 

3 traffic is throttled so that the network computer provides quality of service 

4 differentiation. 

1 9. The method as claimed in claim 1 wherein the step of 

2 throttling prevents substantially all of the network traffic from reaching the network 

3 computer. 

1 10. The method as claimed in claim 1 wherein the step of 

2 throttling allows substantially all of the network traffic to reach the network 

3 computer. 

1 11. A system for controlling network traffic to a network 

2 computer which provides network computer services, the system comprising: 

3 a monitor for measuring capacity of the network computer to service 

4 the network traffic to obtain a signal; 

5 a storage for storing a set of rule data which represents different 

6 policies for servicing the network traffic; 

7 means for selecting a subset of the rule data based on the signal; and 

8 a controller for controlling the network traffic to the network 

9 computer based on the selected subset of rule data wherein the services provided by 
10 the network computer are optimized without overloading the network computer. 

1 12. The system as claimed in claim 11 wherein the network 

2 computer is a server and wherein the network traffic includes requests for service 

3 from network clients over the network. 

1 13. The system as claimed in claim 12 wherein the network is the 

2 Internet and the server is an Internet server. 
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1 14. The system as claimed in claim 1 1 wherein the network traffic 

2 includes denial of service attacks. 

1 15. The system as claimed in claim 1 1 wherein the set of rule data 

2 is stored in at least one multi-dimensional coordinate system. 

1 16. The system as claimed in claim 15 wherein the capacity of the 

2 network computer includes local components or local component indices and 

3 wherein the dimensions of the at least one multi-dimensional coordinate system 

4 corresponds to the load components or load component indices. 

1 17. The system as claimed in claim 11 further comprising a 

2 classifier for classifying network traffic to the network computer to obtain a 

3 plurality of traffic classifications and wherein the controller controls the network 

4 traffic based on the plurality of traffic classifications. 

1 18. The system as claimed in claim 11 wherein the selected subset 

2 of rule data represents quality of service differentiations and wherein the network 

3 traffic is throttled so that the network computer provides quality of service 

4 differentiation. 

1 19. The system as claimed in claim 11 wherein the controller 

2 prevents substantially all of the network traffic from reaching the network 

3 computer. 

1 20. The system as claimed in claim 11 wherein the controller 

2 allows substantially all of the network traffic to reach the network computer. 
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